hackwiki

SUSPICIOUS: the skill’s purpose is coherent, but it routes HackMD credentials and wiki operations through a third-party personal npm CLI rather than an official HackMD client. The main concern is credential forwarding and supply-chain trust, especially with unpinned npx execution; there is no direct evidence of malicious exfiltration in the provided content.